Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
File:                     4TxHTdRFcajO9AZpTgStasYbJWY.mft (raw, json)
Hash identifier:          /jHJkJQqSIim6oprcq5XkJxgbUdi67E9FQ3REvV+pfE=
Subject key identifier:   AD:29:87:20:D3:2C:F7:26:BE:0E:5B:8C:9C:DA:42:DB:A4:88:EB:73
Authority key identifier: E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66
Certificate issuer:       /CN=A919D313/serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566
Certificate serial:       0239
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
Manifest number:          0234
Signing time:             Mon 19 Oct 2026 03:12:09 +0000
Manifest this update:     Mon 19 Oct 2026 03:12:09 +0000
Manifest next update:     Mon 26 Oct 2026 03:12:09 +0000
Files and hashes:         1: 4TxHTdRFcajO9AZpTgStasYbJWY.crl (hash: SQ+hnKZ71bt/YUExwQ590FH0PtOs/q7uNOwMbF7BRas=)
                          2: 658CF9F2721411EEAC707910C4F9AE02.roa (hash: Uq2HpSv3F80zWwHJM5Iy2Qx5noXEmcrVO1BmBcMyXEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl
                          rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 03:12:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D313, serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566
        Validity
            Not Before: Oct 19 03:12:09 2026 GMT
            Not After : Oct 26 03:12:09 2026 GMT
        Subject: CN=6ad58a89-56b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ca:e6:98:18:dd:26:c1:c2:cf:dc:8a:fe:7a:
                    21:40:d0:0b:49:ff:56:f5:97:22:e9:ea:f1:be:c5:
                    3c:4d:ec:a1:87:e7:57:78:09:ba:b6:50:a0:12:1b:
                    a5:23:48:75:67:41:3f:a3:db:97:dc:c7:d1:71:48:
                    72:00:97:c9:26:02:70:c7:3b:90:c6:0b:d6:e9:e0:
                    22:3f:3b:79:cb:e4:35:cb:d6:16:25:96:a0:e9:d6:
                    64:2e:96:58:1b:06:77:ad:0b:3b:21:98:30:6f:db:
                    c2:88:94:c4:93:89:1d:37:3d:fa:db:f9:90:1b:3f:
                    d2:15:6b:26:3b:94:73:61:ec:1a:bf:27:4e:00:29:
                    e2:af:9a:b9:13:46:b0:e2:26:08:bd:51:12:e0:f4:
                    ab:6e:a0:63:9d:de:1f:88:a8:53:12:81:f4:c3:f2:
                    23:60:0e:ed:5d:f6:ce:e5:8c:45:6a:81:ca:24:3d:
                    f7:a4:93:c9:46:77:19:e6:a3:d2:07:a8:6b:ef:97:
                    3d:35:81:23:86:d1:37:da:fd:54:8e:33:eb:6c:83:
                    fd:1c:e0:d5:4f:dd:46:e8:65:2e:79:f3:a6:4c:11:
                    f4:4c:ef:d5:cd:36:fb:55:8d:b6:cc:4b:41:b7:27:
                    30:7a:1a:b7:58:48:c8:e8:bc:fd:32:43:75:e0:fd:
                    92:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:29:87:20:D3:2C:F7:26:BE:0E:5B:8C:9C:DA:42:DB:A4:88:EB:73
            X509v3 Authority Key Identifier:
                keyid:E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a1:44:89:84:c0:4b:3e:96:de:c0:3c:2a:06:b5:f3:1e:3f:
         06:11:2b:54:2a:37:47:c6:ea:96:14:7e:69:0c:46:dd:77:0e:
         80:40:a1:f4:8c:0d:63:42:47:d3:db:bb:ca:9b:ad:7f:f3:6f:
         cf:56:b3:44:79:cb:f8:7d:40:09:0a:c7:5e:99:97:7f:78:96:
         14:26:a8:c7:f3:32:0d:e7:38:bc:ec:78:7d:09:d6:f4:d9:90:
         fa:9d:3a:5d:e8:27:4f:ca:2e:90:ad:94:13:8d:51:27:c2:03:
         6e:3e:a2:a0:2f:ab:e3:f4:dc:cb:87:f6:04:45:ef:81:5c:24:
         06:5a:51:c3:ba:f0:e7:90:02:ca:ef:85:d1:6e:27:31:79:66:
         0b:5b:1f:73:b0:48:6b:ac:16:f3:70:0c:35:4c:8c:f6:e4:0f:
         b2:ce:af:83:60:9d:e5:82:5d:f2:71:38:79:5d:a2:39:21:dc:
         a2:e9:7b:03:6c:6f:38:26:ed:78:d8:54:88:aa:06:5e:b1:f4:
         b4:fb:19:16:26:2b:ed:58:94:6b:b5:d1:7d:38:85:52:ad:46:
         49:6e:49:96:9c:c8:9a:e0:3c:23:ce:94:3e:0f:74:05:19:18:
         97:f2:94:a4:dd:30:bd:2a:bd:ac:39:f9:d3:b3:ae:c2:00:de:
         52:5d:b0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:39:51 2026 by rpki-client